{"id":290954,"date":"2023-05-13T16:14:27","date_gmt":"2023-05-13T20:14:27","guid":{"rendered":"https:\/\/knowtechie.com\/?p=290954"},"modified":"2023-05-13T16:14:39","modified_gmt":"2023-05-13T20:14:39","slug":"online-predators-are-stalking-childrens-webcams-study-reveals","status":"publish","type":"post","link":"https:\/\/knowtechie.com\/online-predators-are-stalking-childrens-webcams-study-reveals\/","title":{"rendered":"Online predators are stalking children’s webcams, study reveals"},"content":{"rendered":"

There has been a tenfold increase in sexual abuse imagery<\/a> created with webcams and other recording devices worldwide since 2019, according to the Internet Watch Foundation.<\/p>\n\n\n\n

Social media sites and chatrooms are the most common methods to facilitate contact with kids, and abuse occurs online and offline. <\/p>\n\n\n\n

Increasingly, predators are using advances in technology to engage in technology-facilitated sexual abuse<\/a>.<\/p>\n\n\n\n

Once a child has gained access to a webcam, a predator can use it to record, produce and distribute child pornography.<\/p>\n\n\n\n

We are criminologists<\/a> who study cybercrime and cybersecurity. Our current research examines online predators’ methods to compromise children\u2019s webcams. <\/p>\n\n\n\n

To do this, we posed online as children to observe active online predators in action.<\/p>\n\n\n\n

Chatbots<\/h2>\n\n\n\n

We began by creating several automated chatbots<\/a> disguised as 13-year-old girls. We deployed these chatbots as bait for online predators in various chatrooms frequently used by children to socialize. <\/p>\n\n\n\n

The bots never initiated conversations and were programmed to respond only to users who identified as over 18 years of age. We programmed the bots to begin each conversation by stating their age, sex, and location. <\/p>\n\n\n\n

This is common practice in chatroom culture<\/a> and ensured the conversations logged were with adults over the age of 18 who were knowingly and willingly chatting with a minor. <\/p>\n\n\n\n

Though it\u2019s possible some subjects were underage and posing as adults, previous research shows online predators usually represent themselves as younger<\/a> than they actually are, not older.<\/p>\n\n\n\n

\"In
Image: KnowTechie<\/figcaption><\/figure>\n\n\n\n

Most prior studies of child sexual abuse rely on historical data from police reports, which provides an outdated depiction of the tactics currently used to abuse children. <\/p>\n\n\n\n

In contrast, the automated chatbots we used gathered data about active offenders and their current methods of facilitating sexual abuse.<\/p>\n\n\n\n

Methods of attack<\/h2>\n\n\n\n

In total, our chatbots logged 953 conversations with self-identified adults who were told they were talking with a 13-year-old girl. <\/p>\n\n\n\n

Nearly all the conversations were sexual in nature, with an emphasis on webcams. Some predators were explicit in their desires and immediately offered payment for videos of the child performing sexual acts. <\/p>\n\n\n\n

Others attempted to solicit videos with promises of love and future relationships. In addition to these commonly used tactics<\/a>, we found that 39% of conversations included an unsolicited link.<\/p>\n\n\n\n

We conducted a forensics investigation of the links. We found that 19% (71 links) were embedded with malware, 5% (18 links) led to phishing websites, and 41% (154 links) were associated with Whereby<\/a>, a video conferencing platform operated by a company in Norway.<\/p>\n\n\n\n

Editor’s Note:<\/strong> The Conversation reviewed the author\u2019s unpublished data and confirmed that 41% of the links in the chatbot dialogues were to Whereby video meetings and that a sample of the dialogues with the Whereby links showed subjects attempting to entice what they were told were 13-year-old girls to engage in inappropriate behavior.<\/em><\/p>\n\n\n\n

It was immediately obvious to us how some of these links could help a predator victimize a child. Online predators use malware to compromise a child\u2019s computer system and gain remote access to their webcam. <\/p>\n\n\n\n

Phishing sites are used to harvest personal information, aiding the predator in victimizing their target. <\/p>\n\n\n\n

For example, phishing attacks can give a predator access to the password to a child\u2019s computer, which could be used to access and remotely control the child\u2019s camera.<\/p>\n\n\n\n

Whereby video meetings<\/h2>\n\n\n\n
\"People
Image: KnowTechie<\/figcaption><\/figure>\n\n\n\n

At first, it was unclear why Whereby was favored among online predators or whether the platform was being used to facilitate online sexual abuse.<\/p>\n\n\n\n

After further investigation, we found that online predators could exploit known functions in the Whereby platform to watch and record children without their active or informed consent.<\/p>\n\n\n\n

This method of attack can simplify online sexual abuse. The offender does not need to be technically savvy or socially manipulative to gain access to a child\u2019s webcam. <\/p>\n\n\n\n

Instead, someone who can persuade a victim to visit a seemingly innocuous site could gain control of the child\u2019s camera.<\/p>\n\n\n\n

Having gained access to the camera, a predator can violate the child by watching and recording them without actual \u2013 as opposed to technical \u2013 consent. <\/p>\n\n\n\n

This level of access and disregard for privacy facilitates online sexual abuse<\/a>.<\/p>\n\n\n\n

Based on our analysis, it is possible that predators could use Whereby to control a child\u2019s webcam by embedding a livestream of the video on a website of their choosing. <\/p>\n\n\n\n

We had a software developer run a test with an embedded Whereby account, which showed that the account host could embed code that allows him to turn on the visitor\u2019s camera. <\/p>\n\n\n\n

The test confirmed that turning on a visitor\u2019s camera without their knowledge is possible.<\/p>\n\n\n\n

\"A
Image: Pexels<\/figcaption><\/figure>\n\n\n\n

We have found no evidence suggesting that other major videoconferencing platforms, such as Zoom, BlueJeans, WebEx, GoogleMeet, GoTo Meeting, and Microsoft Teams, can be exploited this way.<\/p>\n\n\n\n

Control of the visitor\u2019s camera and mic is limited to within the Whereby platform, and some icons indicate when the camera and mic are on. <\/p>\n\n\n\n

However, children might not be aware of the camera and mic indicators and would be at risk if they switched browser tabs without exiting the Whereby platform or closing that tab. <\/p>\n\n\n\n

In this scenario, a child would be unaware that the host was controlling their camera and mic.<\/p>\n\n\n\n

Editor’s Note:<\/strong> <\/em>The Conversation reached out to Whereby, and a spokesperson there disputed that the feature could be exploited. \u201cWhereby and our users cannot access a user\u2019s camera or microphone without receiving clear permission from the user to do so via their browser permissions,\u201d wrote Victor Alexandru Truic\u0103, Information Security Lead for Whereby. He also said that users can see when the camera is on and can \u201cclose, revoke, or \u2018turn off\u2019 that permission at any time.\u201d<\/em>

A lawyer for the company also wrote that Whereby disputes the researchers\u2019 claims. \u201cWhereby takes the privacy and safety of its customers seriously. This commitment is core to how we do business, and it is central to our products and services.\u201d<\/em><\/p>\n\n\n\n

Revoking access to the webcam following initial permission requires knowledge of browser caches. <\/p>\n\n\n\n

A recent study reported that although children are considered fluent new media users, they lack digital literacy in the area of safety and privacy<\/a>. <\/p>\n\n\n\n

Since caches are a more advanced safety and privacy feature, children should not be expected to know to clear browser caches or how to do so.<\/p>\n\n\n\n

Keeping your kids safe online<\/h2>\n\n\n\n
\"Two
Image: Pexels<\/figcaption><\/figure>\n\n\n\n

Awareness is the first step toward a safe and trustworthy cyberspace. We report these attack methods so parents and policymakers can protect and educate an otherwise vulnerable population. <\/p>\n\n\n\n

Now that videoconferencing companies are aware of these exploits, they can reconfigure their platforms to avoid such exploitation. <\/p>\n\n\n\n

Moving forward, an increased prioritization of privacy could prevent designs that can be exploited for nefarious intent. There are several ways people can spy on you through your webcam.<\/p>\n\n\n\n

Here are some recommendations to help keep your kid safe while online. For starters, always cover your child\u2019s webcam. While this does not prevent sexual abuse, it does prevent predators from spying via a webcam.<\/p>\n\n\n\n

You should also monitor your child\u2019s internet activity. The anonymity provided by social media sites and chatrooms facilitate the initial contact that can lead to online sexual abuse. <\/p>\n\n\n\n

Online strangers are still strangers, so teach your child about stranger danger. <\/p>\n\n\n\n

More information about online safety is available on our labs\u2019 websites: Evidence-Based Cybersecurity Research Group<\/a> and Sarasota Cybersecurity<\/a>.<\/p>\n\n\n\n

Have any thoughts on this? Drop us a line below in the comments, or carry the discussion over to our Twitter<\/a> or Facebook<\/a>.<\/em><\/p>\n\n\n\n

Editors’ Recommendations:<\/h4>\n\n\n\n